Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6_Daaw5B0eMPTPaqRBDeVC5g78o.roa
File: 6_Daaw5B0eMPTPaqRBDeVC5g78o.roa (raw, json)
Hash identifier: 4TQhIafpHEPFtiBNu8LdykD/WSXUvtWMvrn9wFoqenE=
Subject key identifier: EB:F0:DA:6B:0E:41:D1:E3:0F:4C:F6:AA:44:10:DE:54:2E:60:EF:CA
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 0ED4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6_Daaw5B0eMPTPaqRBDeVC5g78o.roa
Signing time: Tue 29 Sep 2020 09:56:11 +0000
ROA not before: Tue 29 Sep 2020 09:56:11 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 38841
IP address blocks: 180.177.200.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3796 (0xed4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 09:56:11 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=EBF0DA6B0E41D1E30F4CF6AA4410DE542E60EFCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:59:06:9d:a4:42:fa:11:e8:85:a7:ae:3d:2c:
7a:59:e9:ed:c0:24:e2:09:71:d1:a1:86:b4:7d:b1:
91:95:c4:85:bb:46:4f:ef:ce:22:34:fc:53:99:bc:
58:d1:02:a8:7b:75:70:be:55:25:bb:12:e0:f4:bd:
48:a1:31:70:38:04:8d:ca:76:be:4b:7f:f8:62:69:
55:4e:94:bb:8e:23:e7:b2:01:5a:c9:f0:d6:c8:f9:
e7:1d:59:86:6a:c4:2c:ec:2e:12:90:59:b5:2f:c1:
0d:1c:84:dc:e5:f8:ff:fd:a9:d5:44:10:0a:e1:fd:
2e:c9:ae:36:68:d4:47:aa:61:bb:98:c4:c5:24:37:
6f:5c:ea:45:82:61:39:15:27:fe:c6:e9:bd:dc:9e:
9b:bc:2b:66:0c:b9:73:93:6e:ed:21:b8:72:cf:47:
00:05:8b:67:fa:87:3b:f1:f0:65:8c:d8:3e:b5:36:
bd:42:d7:bc:33:45:a9:f9:dc:e3:46:02:78:e6:ee:
81:de:b6:77:69:a9:2d:f9:53:c4:32:68:35:74:9e:
c6:a4:1b:6e:96:33:eb:e4:8a:4d:60:40:5d:69:0d:
7c:82:de:33:1c:38:55:0d:89:7a:f6:b9:c6:e2:67:
f3:ba:f9:ac:4e:02:32:e4:ab:5e:3c:26:8b:15:2c:
76:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F0:DA:6B:0E:41:D1:E3:0F:4C:F6:AA:44:10:DE:54:2E:60:EF:CA
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6_Daaw5B0eMPTPaqRBDeVC5g78o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.200.0/21
Signature Algorithm: sha256WithRSAEncryption
b9:9f:76:df:1d:40:85:41:aa:87:5b:99:b8:f2:88:b1:f3:3a:
74:2d:7a:8a:5e:52:5c:31:f0:39:ac:1d:40:ac:e0:b8:e0:42:
93:b3:14:62:db:c0:4a:5e:1f:3f:5c:45:96:0e:36:ec:dc:f5:
39:84:93:d5:ef:22:a6:8b:dd:93:ee:7d:31:b6:e7:cf:f5:62:
5f:0b:da:97:6c:b8:d8:c5:fa:d6:75:58:9b:4d:d3:3f:bb:e8:
55:4c:63:d4:e0:98:e3:5e:54:c0:69:bb:ae:2e:16:df:78:a4:
de:23:24:61:0b:ba:78:51:9a:db:1d:da:7b:22:17:3e:01:59:
d9:e4:7c:3e:dd:da:14:b1:31:de:a1:14:43:bd:a9:5d:97:88:
a0:4a:9d:fa:52:05:d6:32:18:90:41:89:12:b8:03:5f:cf:b9:
51:09:e1:fd:c5:57:09:1b:7d:a2:b4:4f:09:c9:f9:52:a1:07:
b3:12:06:fd:90:e5:ef:43:41:58:54:40:fc:58:30:f5:ce:53:
57:fe:bc:18:d8:9b:f8:e7:cf:04:28:66:3e:4f:eb:ed:bf:c7:
7e:b0:69:25:70:a2:c8:ea:e8:06:51:f3:e2:a9:5c:89:1a:17:
49:b0:a7:a5:e8:fb:72:b1:ab:da:c0:d5:cf:bc:67:5a:64:78:
c0:d3:cf:25
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICDtQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMDA5Mjkw
OTU2MTFaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEVCRjBEQTZCMEU0MUQx
RTMwRjRDRjZBQTQ0MTBERTU0MkU2MEVGQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRWQadpEL6EeiFp649LHpZ6e3AJOIJcdGhhrR9sZGVxIW7Rk/v
ziI0/FOZvFjRAqh7dXC+VSW7EuD0vUihMXA4BI3Kdr5Lf/hiaVVOlLuOI+eyAVrJ
8NbI+ecdWYZqxCzsLhKQWbUvwQ0chNzl+P/9qdVEEArh/S7JrjZo1EeqYbuYxMUk
N29c6kWCYTkVJ/7G6b3cnpu8K2YMuXOTbu0huHLPRwAFi2f6hzvx8GWM2D61Nr1C
17wzRan53ONGAnjm7oHetndpqS35U8QyaDV0nsakG26WM+vkik1gQF1pDXyC3jMc
OFUNiXr2ucbiZ/O6+axOAjLkq148JosVLHbPAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU6/Daaw5B0eMPTPaqRBDeVC5g78owHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzZfRGFhdzVCMGVNUFRQYXFS
QkRlVkM1Zzc4by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
scgwDQYJKoZIhvcNAQELBQADggEBALmfdt8dQIVBqodbmbjyiLHzOnQteopeUlwx
8DmsHUCs4LjgQpOzFGLbwEpeHz9cRZYONuzc9TmEk9XvIqaL3ZPufTG258/1Yl8L
2pdsuNjF+tZ1WJtN0z+76FVMY9TgmONeVMBpu64uFt94pN4jJGELunhRmtsd2nsi
Fz4BWdnkfD7d2hSxMd6hFEO9qV2XiKBKnfpSBdYyGJBBiRK4A1/PuVEJ4f3FVwkb
faK0TwnJ+VKhB7MSBv2Q5e9DQVhUQPxYMPXOU1f+vBjYm/jnzwQoZj5P6+2/x36w
aSVwosjq6AZR8+KpXIkaF0mwp6Xo+3Kxq9rA1c+8Z1pkeMDTzyU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:24 2024 by rpki-client on console-ams.rpki-client.org